PingIntelligence

ABS variable settings

The following table lists the variables that you can set for ABS.

Variable Description

management_port

Port for ABS to ASE and REST API to ABS communication. The default value is 8080.

mongo_username and mongo_password

MongoDB username and password. The default username is absuser, and the default password is abs123.

mongo_cache_size

If you are running all the PingIntelligence components on the same instance, keep the MongoDB cache size to a maximum of 25% of the system memory. If you are running MongoDB on a separate instance, keep the MongoDB cache size to a maximum of 40% of the system memory.

mongo_ssl

Default value is true. PingIntelligence deployment ships with a default self-signed certificate. Setting it to false establishes non-SSL connection between ABS and Mongo.

mongo_certificate_verify

Set it to true if you want to verify MongoDB Secure Sockets Layer (SSL) server certificate when ABS connects to MongoDB. The default value is false.

Make sure mongo_ssl is set to true before setting mongo_certificate_verify to true.

mongo_replica_set

Name of the MongoDB replica set. Default name is absrs01.

attack_initial_training

The number of hours that you want to train the AI model before it moves to the prediction mode. Default value is 24 hours.

system_memory

Memory size in MB allocated to run machine learning jobs. Recommended to be at least 50% of system memory.

access_key and secret_key

The access key and secret for the admin user. For more information on different ABS users, see ABS users.

":" (colon) is a restricted character and not allowed in access key and secret key.

access_key_ru and secret_key_ru

The access key and secret for the restricted user. For more information on different ABS users, see ABS users.

":" (colon) is a restricted character and not allowed in access key and secret key.

jks_password

The password of the Java KeyStore (JKS). The default password is abs123.

Email default settings

Configure the following settings:

  • enable_emails: Set it to true for ASE to send email notifications. Default value is false.

  • smtp_host and smtp_port

  • sender_email: Email address used from which email alerts and reports are sent.

  • email_password: Password of sender’s email account.

  • receiver_email: Email address at which the email alerts and reports are sent.

CLI admin password

The default value for command-line interface (CLI) admin is admin. To change the password, you need the current password.

poc_mode

Sets the mode in which the artificial intelligence (AI) engine sets the thresholds for the AI models. If set to true, AI engine sets thresholds at a lower value. It should be set to true only for a proof-of-concept deployment.

consumer_user

ABS consumer user in Kafka.

Default: abs_consumer

producer_user

ABS producer user in Kafka.

Default: abs_producer

abs_groupid

ABS group in Kafka.

Default: pi4api.abs

consumer_authentication_password

ABS consumer user password.

Default: changeme

producer_authentication_password

ABS producer user password.

Default: changeme

min_insync_replicas

Minimum number of insync replicas for data in Kafka.

transactions_topic

ABS transaction topic in Kafka.

attacks_topic

ABS attack topic in Kafka.

anomalies_topic

ABS anomalies topic in Kafka.

discovery_topic

ABS discovery topic in Kafka.

topic_partitions

Number of partitions for topics.

replication_factor

Replication factor for topics.

retention_period

Retention period of data on topics.

kafka_server_url

Pre-existing Kafka ip:port that must be configured in config/abs-defaults.yml.

kafka_custom_truststore_password

Pre-existing Kafka truststore password in config/abs-defaults.yml.

management_port

API Publish service port.

Default: 8050

jks_password

API Publish service JKS password.

You can change the password for the JKS file. It will be generated during installation.

mongo_certificate_verify

Mongodb Server Certificate Verification for API Publish service.

Default: false

server_ssl_key_alias

Alias for API Publish service SSL JKS file.

Default: pingidentity

data_dbname

API Publish service database name.

Default: abs_data

meta_database

API Publish service metadatabase name.

Default: abs_metadata

current_admin_password

API Publish service CLI password.

Default: admin

new_admin_password

API Publish service new admin password.

Default: admin